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AO 106 (Rev. 04/10) Application for a Search Warrant 



United States District Couri 

for the 

Southern District of California 


In the Matter of the Search of 

(Briefly describe the property to be searched 
or identify the person by name and address) 

8ch. net 

9120 Double Diamond Parkway, Suite 5901, 
Reno, NV 89521 


rp pr 


APR 2 9 2019 


Case No. 


CLERK US DlS I HICT Cm iut 
SOUTHERN DISTRICT OF CALIFORNIA 
Y - - -DEPUTY 


1 9 M J 1 7 5 5 


APPLICATION FOR A SEARCH warrant r . m UNSEALED PER ORDER OF C0UR 

I, a federal law enforcement officer or an attorney for the government, request a search warrant and state under 
penalty of perjury that I have reason to believe that on the following person or property (identify the person or describe the 
property to be searched and give its location): g E£ ATTACHMENT A 

(INCORPORATED HEREIN) 


located in the 


District of 


Nevada 


, there is now concealed (identify the 


person or describe the property to be seized): 

8ch.net 

SEE ATTACHMENT B 
(INCORPORATED HEREIN) 

The basis for the search under Fed. R. Crim. P. 41 (c) is (check one or more): 

Sf evidence of a crime; 

sf contraband, fruits of crime, or other items illegally possessed; 
sf property designed for use, intended for use, or used in committing a crime; 
□ a person to be arrested or a person who is unlawfully restrained. 

The search is related to a violation of: 


Code Section Offense Description 

18 U.S.C. 247(a)(1), (a)(2) Intentional obstruction, by force or threat of force of persons in the free exercise of 

religious belief, resulting in death; willfully causing bodily injury to persons through 
18 U.S.C. 249(a)(1) the use of a firearm because of the actual or perceived religion of said persons, re 

The application is based on these facts: 

SEE AFFIDAVIT OF SPECIAL AGENT MICHAEL J. ROD, INCORPORATED HEREIN, 
sf Continued on the attached sheet. 

□ Delayed notice of_days (give exact ending date if more than 30 days:_) is requested 

under 18 U.S.C. § 3103a, the basis of which is set forth on the attached sheet. v 

— J 

Applicant's signature 

_ Special Agent Michael J. Rod, FBI _ 

Printed name and title 


Sworn to before me and signed in my presence. 


Date: _04/28/2019 


City and state: San Dieg o, CA 



Printed name and title 
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AFFIDAVIT IN SUPPORT OF 
AN APPLICATION FOR A SEARCH WARRANT 

I, Michael J. Rod, being first duly sworn, hereby depose and state as follows: 

I. INTRODUCTION 

1. This affidavit is submitted in support of an application for a search 
warrant, pursuant to 18 U.S.C. 2703(a), 2703(b)(1)(A), and 2703(c)(1)(A), for 
information associated with the following 8chan posting with ID 4e267a and No. 
13192921 (hereinafter the “subject posting”), created by John Earnest and others, 
known and unknown, and stored at the premises owned, maintained, controlled, or 
operated by 8ch.net, 9120 Double Diamond Parkway, Suite 5901, Reno, NV 89521. 

2. As described in further detail below, on April 28,2019, John Earnest, 
armed with an AR15 style rifle, conducted an attack at the Chabad of Poway 
synagogue, injuring three individuals and killing one individual. He was later 
arrested and interviewed and admitted to the Chabad of Poway incident, as well as 
an arson at the Dar-ul-Arqam Mosque and Islamic Center on March 24, 2019. 

3. There is probable cause to believe that within 8chan, more fully 
described in Attachment A, will be found evidence of violations of federal law, 
namely, intentional obstruction, by force or threat of force of persons in the free 
exercise of religious belief, resulting in death, in violation of 18 U.S.C. § 247(a)(2), 
willfully causing bodily injury to persons through the use of a firearm because of the 
actual or perceived religion of said persons, resulting in death, in violation of 18 

.S.C. § 249(a)(1), and damage to religious property, in violation of 18 U.S.C. § 
247(a)(l), as more fully described in Attachment B. 
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4. I am an investigative or law enforcement officer within the meaning of 
Title 18, United States Code, Section 2510(7); that is, an officer of the United States, 
who is empowered by law to conduct investigations of and to make arrests for 
offenses enumerated in Titles 18 and 21 of the United States Code. 

5. I am a Special Agent of the FBI, and have been so employed since May 
2010.1 am currently assigned to the San Diego Field Division. Prior to joining the 
FBI, I was a United States Marine Corps Judge Advocate serving on active duty 
from November 2001 until May 2010. In my capacity as a Judge Advocate, I 
prosecuted and defended violations of the Uniform Code of Military Justice, acted 
as the Investigating Officer during criminal proceedings, provided legal assistance 
to service members, and advised military commanders on a wide variety of civil and 
administrative matters. 

6. I have received twenty-one weeks of training at the FBI Academy in 
Quantico, Virginia. During that training, I received instruction regarding a wide 
variety of investigative techniques that are commonly used in support of a wide 
range of the FBI’s investigative priorities. The training included instruction 
regarding the use of sources, electronic surveillance techniques, law enforcement 
tactics, search and seizure laws and techniques, surveillance, forensic techniques, 
interviewing, and a variety of other subjects. I have acted as the lead investigator on 
a variety of cases and have participated in multiple cases that have focused on gang 
related matters. 

7. Between July 2012 and February 2019, I was assigned to the North 
County Regional Gang Task Force (NCRGTF). During my time at the NCRGTF, I 
had personal contact with dozens of self-admitted or known gang members and their 
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associates and have discussed their lifestyles, method of operations regarding violent 
and property crimes, and their drug trafficking and drug distributing activities. I have 
participated in investigations involving criminal gang members including but not 
limited to Hispanic criminal street gangs. In March 2019,1 was assigned to the HTTF 
and have assisted in cases involving human trafficking and the sexual exploitation 
of adults and children. The facts set forth in this affidavit are based on my own 
personal knowledge, knowledge obtained from other individuals during my 
participation in this investigation (including other law enforcement officers), my 
review of documents and computer records related to this investigation, and 
information gained through my training and experience. Because this affidavit is 
submitted for the limited purpose of establishing probable cause for a search warrant, 
it does not set forth every fact that I or others have learned during this investigation. 

II. PROBABLE CAUSE 
A. Chabad of Poway Attack 

8. During the course of my current duties, I have learned the following 
from consulting with other state, local and federal law enforcement officers, 
including San Diego Sheriffs Department (SDSD) Detectives, San Diego County 
District Attorney Investigators, and my fellow FBI agents. 

9. On April 27, 2019 at approximately 11:23 am. San Diego Sheriffs 
Communication Center received a 911 call of shots fired at the synagogue located 
on Chabad Way in Poway. The reporting party, Dan Sedereff, stated shots were 
fired in the synagogue. 

10. During a briefing by the SDSD following the incident, it was reported 
that a white male, later identified as John Earnest, entered the synagogue through 


3 








1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 


Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.9 Page 5 of 37 


the front door and fired several rounds from an AR15 rifle. He then proceeded 
further into the synagogue where he began firing rounds. 

11. The SDSD stated that inside the synagogue was off-duty Border Patrol 
Agent Jonathan Morales who retrieved a revolver weapon from one of the 
congregation members and chased the suspect out of synagogue firing four shots at 
him as he got into a silver Honda that was parked across the street from the church. 
The Honda fled northbound on Rancho Bernardo Road. Morales then returned the 
gun to the congregation members who placed it in a black prayer bag and left it in 
the synagogue. 

12. It was determined by officers that four people were shot and transported 
to the hospital. 

13. SDSD Deputies responded to the synagogue along with paramedics. 
The synagogue was secured by deputies pending obtaining a search warrant from 
state authorities, which was planned to be executed later that day. 

14. The same day (April 27, 2019), at approximately 11:30 a.m., a male 
who identified himself as John Earnest called into California Highway Patrol 
emergency line stating that he had fired shots into the synagogue and was willing to 
surrender to law enforcement. Earnest called from phone number 858.999.1461. 
Earnest gave his location as Phil's BBQ at 17051 West Bernardo Center Dr. He 
stated he was in possession of an AR15 Smith & Wesson MP15 rifle and several 
rounds of ammunition in his vehicle but that he would not use them against law 
enforcement. During that call, Earnest made the following comments, among others: 
‘I just shot up a synagogue. I’m defending my country ... I’m just trying to defend 
my nation against the Jewish people; they’re destroying our people ... I opened fire 
at a synagogue; I think I killed some people.” I am informed and believed that Smith 
& Wesson does not manufacture firearms in the State of California. 
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15. San Diego Police Department (“SDPD”) Officers responded to that 
location and took John Earnest into custody without further incident. Seen on the 
front passenger seat was an AR15 rifle but no handgun was visible. Additionally, in 
the vehicle was a helmet with a Go-Pro camera on it. SDPD Officers were holding 
the vehicle secure at the location pending obtaining and executing a state search 
warrant. 


16. While on scene at the vehicle, it was learned that one of the victims, 
Laurie Kaye, died as a result of gunshot wounds. 

17. During a public safety interview with SDPD Detective Rudy Castro, 
John Earnest confirmed his home address as 10134 Freeport Ct., San Diego CA. He 
further stated that there were no further weapons at the home. At that time, Earnest 
did not appear to be under the influence of a controlled substance but did appear to 
have a "flat affect" as though he was detached or unaffected by his actions. 

18. SDPD SWAT officers and Detectives responded to the residence on 
Freeport Ct. The parents of the suspect were contacted and escorted from the home 
and taken to the Sheriffs Poway substation, pending the execution of a state search 
warrant on their residence. While at the substation, the parents informed law 
enforcement that their son frequently uses a computer in their home. 

19. Using various search methods, Whitney Buckingham an SDSD system 
data miner, found a manifesto on Pastebin.com written by a person identifying 
himself as John Earnest. In the manifesto, which he named "An Open Letter", 
Earnest made many anti-Semitic and anti-muslim statements. One such statement 
which is a direct quote is, "As an individual, I can only kill so many Jews." He states 
he is not a terrorist but that he hates anyone who he sees as a threat to his country. 
Earnest took credit for a fire that had been set at mosque in Escondido a few weeks 
earlier. His exact statement was "I scorched a mosque in Escondido with gasoline a 
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week after Brenton Tarrant's sacrifice and they never found shit on me." 
Additionally, he wrote "I spray-painted on the parking lot. I wrote Tor 
Brenton Tarrant -t./pol/." 

20. FBI Special Agent Maria Solomon observed part of the post -Miranda 
statement of Earnest. During that interview, he informed an SDSO Detective that 
he had adopted his ideology of hate for members of the Jewish religion 
approximately 18 month earlier. Based on my training and experience, I know that 
there is a process in which someone undergoes adoption of radical ideologies. This 
process can take several months or several years before a person actually commits 
to those ideologies. During the interview, Earnest also stated that he was inspired 
by individuals such as Adolph Hitler and Brenton Tarrant. 

B. Dar-ul-Arqam Mosque and Islamic Center Arson 

21. Based on information received from Bureau of Alcohol, Tobacco, 
Firearms and Explosives (“ATF”) Special Agent Scott Brahin, on March 24,2019, 
an unknown individual set fire to a mosque in Escondido, California. 

22. Specifically, on March 24,2019, at approximately 3:19 a.m., a 911 call 
was placed to report a fire at the Dar-ul-Arqam Mosque and Islamic Center 
(“mosque”), located at 318 West 6th Avenue in Escondido, California. The 
Escondido Fire Department and then Escondido Police Department (“EPD”) 
responded. First responders learned approximately seven individuals had been 
spending the night at the mosque and, at approximately 3:15 a.m., they had observed 
flames and rushed outside to extinguish them with a fire extinguisher. First 
responders noticed ash or charring along approximately half the length of the 
mosque’s west side and spray-painted writing on the asphalt parking lot near where 
the fire had occurred that read, “FOR BRENTON TARRAN r/pol/.” First responders 
also noticed the odor of, or similar to, gasoline at the location of the fire. 
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23. Investigators conducted an online search for “Brenton Tarran” and 
noted that he was arrested for the mass shootings at two mosques in New Zealand 
that occurred on March 15, 2019 and is believed to be a white supremacist. 
Investigators also learned “r/pol/” is a reference to an online political discussion 
board that has been characterized as predominately racist, espousing views 
embraced by white supremacist groups. 

24. Investigators reviewed surveillance footage retrieved from a business 
across the street from the mosque. The camera recorded an individual (“suspect”) 
park his/her four-door sedan in front of the mosque at approximately 3:00 a.m. In 
the video, the suspect exited the vehicle, walked towards the parking lot where the 
message was later found spray painted, and then returned to the vehicle. Shortly 
thereafter, the suspect again exited the car carrying a large container and walked 
toward the area of the mosque where the fire was set. A short time later, at 
approximately 3:15 a.m., a large flash of light and smoke are seen in the video and 
the suspect walked back to the vehicle and drove away westbound on West 6th 
Avenue. In surveillance videos obtained from businesses along the route, 
investigators observed that the suspect appeared to arrive at the mosque on March 
24,2019 by driving eastbound on West 9th Avenue, northbound on South Escondido 
Boulevard, and then westbound on West 6th Avenue, where he parked in front of 
the mosque. Investigators also observed, as noted above, that the suspect left the area 
by driving westbound on West 6th Avenue. Based on their review of surveillance 
videos, investigators believed that the suspect was driving a 2010 to 2015 Civic 
Honda, silver in color. 

25. Earnest’s statements in the manifesto that he set fire to the Escondido 
mosque on March 24, 2019, are corroborated by the following. At the time of his 
arrest for the synagogue shooting, Earnest was driving a 2012 Honda Civic, grey in 
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color. Additionally, the spray painted message left by the mosque arsonist was not 
released to the media. The fact that the manifesto specifically makes reference to 
that message further corroborates that Earnest committed the mosque arson. 

C. 8chan Posting 

26. Based on my training and experience, and online research, 8chan, also 
known as Infinitechan or Infinitychan (sometimes stylized as oochan), is an 
American-based website composed of user-created boards. According to Wikipedia, 
“An owner moderates each board, with minimal interaction from other site 
administration.” 

27. On April 27,2019, an Anonymous user posted on 8chan a posting with 
thread number 13192921 and posting ID number 4e267a. The posting read in part: 

It’s been real dudes. From the bottom of my heart thank you for 

everything. Keep up the infographic redpill threads. I’ve only been 

lurking for a year and a half, yet, what I’ve learned here is priceless. 

It’s been an honor. 

Livestream link is below as well as my open letter. Livestream will 

begin shortly, https://www.facebook.com/iohn.eamest.96780 

An open letter. 

https://pastebin.com/VXXFOMTW 

https://www.mediafire.com/file/d9oilcmibenxivz/Open Letter.pdf.file 

28. As discussed above, agents observed the content at the above described 
pastebin.com address and observed an open letter believed to be written by Earnest. 
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Additionally, on April 27, 2019, Greg Simon of the SDPD located the above 
described posting that included information about a livestream using a Facebook 
account, https://www.facebook.com/iohn.earnest.96780 (i.e., Facebook Account 
Number 100035547390347, with user name “john.eamest.96780.”). On or about 
April 27,2019, following the synagogue shooting, local law enforcement authorities 
served a search warrant on Facebook for records for the “john.eamest.96780” 
Facebook account, pursuant. In response to that request, Facebook provided records 
which listed the user’s phone as 858.999.1461 (the same number Earnest used to call 
the CHP on April 27, 2019). Facebook verified the number on April 7, 2019. 
Facebook identified two additional Facebook accounts possibly utilized by the user 
of the john.earnest.96780 Facebook account, which were accessed via the same 
browser and the same electronic device. 

29. Agents observed that there were several postings responding to the 

tfW, cVopn' 

above described posting and thread. See Appendix 1, attached to Attachment B . For 

example, on April 27,2019, a posting with ID 2d7a65 and thread number 13193230 

posted, “anyone had a decent read of his manifesto yet?” Another posting, ID 

cb34c8 and thread number 13193259, stated: 

It’s very much written for /pol/, he goes into some depth about things 
being called falseflags, about how you should start getting 
prepared...Tarrant was a much more articulate writer, and walked 
through his thought process much more, which leads to people being 
able to understand (even if they can’t publicly admit) why he did what 
he did. Earnest’s honest passion is his highlight and his weakness - no 
boomer is going to read this and suddenly became aware of the JQ.” 

Another April 27, 2019 with ID 078285 and thread number 13193283 posted an 
image of a news station article posted on April 27, 2019 at 12:11 pm. The headline 
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stated, “Multiple people gunned down at Poway Synagogue, police search for 
shooter.” 

D. Basis for Information Sought 

30. Agents seek IP address and metadata information about Earnest’s 
original posting and the postings of all of the individuals who responded to the 
subject posting and/or commented about it. Additionally, agents seek information 
about any other posting coming from the IP address used by Earnest to post the 
subject posting. 

31. As discussed above, Earnest made a posting in which he thought to 
draw attention to his forthcoming attack on the Chabad of Poway, share his views 
through his open letter, and offer people the opportunity to observe the attack itself. 
Several people responded, both individuals who were taken aback about the posting 
as well as people who were sympathizers. As a result, some of the individuals may 
be potential witnesses, co-conspirators and/or individuals who are inspired by the 
subject posting. Based on agents’ training and experience, following attacks such 
as those conducted by Earnest, other individuals are inspired by the attacks and may 
act of their own accord. For example, as described above, Earnest himself was 
inspired by the Christchurch event in New Zealand. Regardless of the nature of the 
comments, the evidence sought to be seized as described in Attachment B is relevant 
as evidence of Earnest’s bias and motivation in committing the hate crimes set forth 
in Attachment B. Even comments made in response to the subject posting or about 
it are relevant to Earnest’s motivation for his violent attacks to the extent that as 
explained above, some of the posters may be potential witnesses, co-conspirators 
and/or individuals who are inspired by the subject posting. As discussed above, 
Earnest stated in the subject posting, “I’ve only been lurking for a year and a half, 
yet, what I’ve learned here is priceless.” This information suggests that Earnest was 
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inspired and/or educated by individuals who commented on his threads. Based on 
this information, there is reasonable cause to believe that the information sought, 
specifically IP address and metadata for all commenters, constitute evidence of his 
motivation in committing the offenses described herein and are thus relevant and 
material to an ongoing criminal investigation, information that may be sought by an 
order issued pursuant to 18 U.S.C. § 2703(c) and (d). That is, the information may 
lead to the identity of individuals who inspired and/or educated Earnest or are aware 
of his motivation in committing the attacks. 

32. FBI agents have consulted with 8ch.net about the kind of information 
that the website maintains and understand that 8ch.net is an anonymous imageboard 
and users are not required to create an account or use a name or an email address to 
post. Hence, regular users usually have no usernames or email addresses linked to 
their posts. However, agents have also learned that 8ch.net has used data forensics 
in the past to find information about individuals who have posted on 8ch.net, 
including IP address and metadata information (although not if the thread or post has 


been deleted). On Afn[ |^( 

HI. SEARCH PROTOCOL ft) Wrt, urJrf l 12.^COc*ma ^ V 

Y ^ , 

33. Based upon my experience and training, and the experience and training I 
of other agents with whom I have consulted with, electronically stored data can be 
permanently deleted or modified by users possessing basic computer skills. In this 
case, only if the subject receives advance warning of the execution of this warrant, 
will there be a genuine risk of destruction of evidence. 

B. Prior Attempt to Obtain Evidence 

34. The United States is aware that individual users of ch.net contacted law 
enforcement authorities about the subject posting and may have provided the subject 
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posting to law enforcement authorities. The United States is unaware of other efforts 
except as described herein. 

C. Ch.net 

35. Ch.net is an Internet company that, among other things, provides electronic 
communication services to its subscribers. Ch.net's electronic mail service allows 
its subscribers to exchange electronic communications with others through the 
Internet. 


36. At the creation of a Ch.net account and for each subsequent access to 
the account, Ch.net logs the Internet Protocol ("IP") address of the computer 
accessing the account. An IP address is a unique address through which a computer 
connects to the Internet. IP addresses are leased to businesses and individuals by 
Internet Service Providers. Obtaining the IP addresses that have accessed a 
particular Ch.net account often identifies the Internet Service Provider that owns and 
has leased that address to its customer. Subscriber information for that customer 
then can be obtained using appropriate legal process. 

D. Procedures for Electronically Stored Information 

37. Federal agents and investigative support personnel are trained and 
experienced in identifying communications relevant to the crimes under 

i 

investigation. The personnel of Ch.net are not. It would be inappropriate and 
impractical for federal agents to search the vast computer network of Ch.net for the 
relevant accounts and then to analyze the contents of those accounts on the premises 
of Ch.net. The impact on Ch.net’s business would be severe. 

38. Therefore, I request authority to seize all content, including electronic 
mail and attachments, stored instant messages, stored voice messages, photographs 
and any other content, as described in Attachment B. In order to accomplish the 
objective of the search warrant with a minimum of interference with the business 
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activities of Ch.net, to protect the rights of the subject of the investigation and to 
effectively pursue this investigation, authority is sought to allow Ch.net to make a 
digital copy of the entire contents of the accounts subject to seizure. That copy will 
be provided to me or to any authorized federal agent. The copy will be forensically 
imaged and the image will then be analyzed to identify communications and other 
data subject to seizure pursuant to Attachment B. Relevant data will be copied to 
separate media. The original media will be sealed and maintained to establish 
authenticity, if necessary. 

39. Analyzing the data to be provided by Ch.net may require special 
technical skills, equipment and software. It also can be very time-consuming. 
Searching by keywords, for example, often yields many thousands of “hits,” each of 
which must be reviewed in its context by the examiner to determine whether the data 
in within the scope of the warrant. Merely finding a relevant “hit” does not end the 
review process. Certain file formats do not lend themselves to keyword searches and 
keyword search text. Many common electronic mail, database and spreadsheet 
applications, which files may have been attached to electronic mail, do not store data 
as searchable text. The data is saved in a proprietary non-text format. The volume of 
storage allotted by service providers increases, the time it takes to properly analyze 
recovered data increases dramatically. 

40. Based on the foregoing, searching the recovered data for the 
information subject to seizure pursuant to this warrant may require a range of data 
analysis techniques and may take weeks or even months. Keywords need to be 
modified continuously based upon the results obtained. The personnel conducting 
the examination will complete the analysis within (90) days of receipt of the data 
from the service provider, absent further application to this court. 
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41. B ased upon my experience and training, and the experience and training 
of other agents with whom I have communicated, it is necessary to review and seize 
all posting that identify any poster of the subject posting and any postings sent or 
received in temporal proximity to incriminating electronic mails that provide context 
to the incrimination mails. 

42. All forensic analysis of the imaged data will employ search protocols 
directed exclusively to the identification and extraction of data within the scope of 
this warrant. 

IV. REQUEST FOR SEALING AND PRECLUSION OF NOTICE 

43. Although John Earnest has been arrested by state authorities, he is 
unaware of the scope and nature of law enforcement’s investigation into his 
activities. Additionally, law enforcement is still investigating whether he acted 
alone, or conspired with others or was inspired by others. As such, there is reason 
to believe that that disclosure of the affidavit and warrant will result in destruction 
of or tampering with evidence or otherwise seriously jeopardize the investigation. 
Accordingly, it is requested that this warrant and its related materials be sealed until 
further order of the Court. In addition, pursuant to Title 18, United States Code, 
Section 2705(b), it is requested that this Court order Ch.net to whom this warrant is 
directed not to notify anyone of the existence of this warrant, other than its personnel 
essential to compliance with the execution of this warrant until October 28, 2019, 
absent order from the Court. 

V. CONCLUSION 

44. Based on the foregoing, your affiant submits that there is probable 
cause to believe that violations of federal criminal law, namely, violations of federal 
law, namely, intentional obstruction, by force or threat of force of persons in the free 

of religious belief, resulting in death, in violation of 18 U.S.C. § 247(a)(2), 
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willfully causing bodily injury to persons through the use of a firearm because of the 
actual or perceived religion of said persons, resulting in death, in violation of 18 
U.S.C. § 249(a)(1), and damage to religious property, in violation of 18 U.S.C. § 
247(a)(1), have occurred, and that evidence of said violations, as described in 
Attachment B will be found within the subject posting and all the postings of all of 
the individuals who responded to the subject posting and/or commented about his 


posting. 


I declare under penalty of perjury under the laws of the United States that the 
foregoing is true and correct. 



Michael J. Rod 
FBI, Special Agent 


Sworn to before me this 


7^ V day of April_2019 



n\ Jill L. Burkhardt 


ED STATES MAGISTRATE JUDGE 


15 














Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.21 Page 17 of 37 






Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.22 Page 18 of 37 


File nude) : 24426db81e67b3d,,,. jpg »sae, izs.ise. bbw»»MJ y&M feii 

f~jj l^ahem* Anonymous 04/27/19 (Sat) 14:00:15 ID: 4e267a No 13192921 [ Watch 
Thread ! [ Show All Posts ) gaiMggtis, ’ 

It s been real dudes. From the bottom of my heart thank you for everything Keep 
up the enfographfic redpii threads. I’ve only been lurking for a year and a half, yet 
What I’ve learned here is priceless. 

It's been an honor. 

Uvestream link is below as well as my open letter. Livestream will begin shortly 
https ,7/wwwfac ebook c om/johneamesf .95780 

An open letter. 

https //pastebinxom/VXXFQf^TW 

Also, in case they take down my livestream too soon and you dourt get to hear all 
the awesome tunes I had planned—here they are. Very meme-able songs—you 
should have no problem. 

-Sloop John B fay The Beach Boys 
’Original Pokemeo Theme Song 
Wart hog Run Theme from Halo Combat Evolved 
-Warriors by Imagine Dragons 
-The Last Stand by Sabaton 
-Blow Me Away by Breaking Benjamin 
-Winged Hussars by Sabaton 
-Rose Tattoo by Dropkick Murphys 
-The Path (A New Beginning) from The Last of Us 

Mieme magic is real. May the LORD Christ be with you alt. 















Case 3:19-mj-01755-JLB 

.MW 


Document 1 Filed 04/29/19 PagelD.23 Page 19 of 37 

.11 ; 




m SefUfSffE 


CwvfuMtf? $h th* f*4|. 

i_3 TifSi wjnw 


*thft gehan Glotoal W>j(e-> 



I Bi&iasiilS^^ | ^Isi^iValyjiJmoP' II 

frost Test j! FAQ. | 

Fite s^1'92237R8d?§3'!i -■ - -s op iMUtt ml uosbkicb*. sas.sil, 

by Tarrant 
stiMiing 
rnuifimi 
Arjertymous 
04/27/19 (Sat J 
08:3928 

m mm 


IMto. 1i3192480 ^s*as>®e 

yjtvfcH&tp '-y^tWm **r.y.U%i 


• { Wa tch Tfrgead] 


[ Show An Posts'! 

Freneh friend $1 mm $&nt em fas, &&m, tA 4&min3te 

muslim ctog-dealera, who sei hsefosn la tshe teds. 


m i'Ciyr local myslant dfyg$ 

Everybody can db 5®r»atliingt fior fe-wodd 

.M^^ame/Twanljjlaefe 

OAnenym&us Wmm 5S*j 06:41:30 ® SS0293 
Nal 3192485 *>3S««sa0i 


»13t9BABCl 40W 

FuC*ir^ TGcbsnri«J. I 

-cant fucfcing uptoab twem here.: Fucking Sehan 


OaAnonvniaus 04727713 |Sa*J 06:4221 ID: 066581 
Na1$192487 





















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.24 Page 20 of 37 

3^05 -tf .11 ■=> m 

A SdRufSSI. 


Fite • (niae -C Jgflg liStiefl *3 ?aS0it1Q?4. 525.SS2, 



[-] LJnspfred 
by Tarrint 
spooling 
musliims 

04/27/lt($alJ 
08-39C2G 
IP: 550293 


lto.K3i'924i30 *>1 j'?T45-5 . ** r 2-r*3S2S- 




^51*3*5 -3 *>r s thLZ^ [Watch Jbggad j 

I ShQw M\ P'ftStS f 


Fremh frtend -of imue sen! me $*&. he dakm to ®&nina?e 
Muslim dteigiteeatesrs, mffte sta &**&». to 9m fetes 

Kill your local snyslBJ* •drugs deafer 
Everybody can do saenelhangi far thus wated 
hitoSt^.m0«Taffranis_Lg | ^s 

Miami 1S*J 68:41:30 ©; 550293 

Noci aliases 

Fusing wdeos are 9m Iasi Into' it GhaJ TG chawfel. I 
cant fecteng ygto&sE 9mm fo&G. Fucfcteg Scawi 

Laftowwiaou* 04/27/19 |*Sal) <38:42:21 IQ: OG&SGl 
Nq. 13192487 »ts , i92ag£ ^-arsgsTB 

jews deni tuawe friends. 

Oftnonymous MJZTfti (3»J 08:43:41' ID: 550293 
M».1$f9S4$2 

V mmmm - ^. 

t a rt» - r. v ,~nT,,.. tjt » afc .ri vJfr. ji m =*»»*■■ (L-3 L aw 

- ' WwJWr yOTi Ww W ! pHMCi. M KW9KP3®5'CwprjfwTwBre 

RetawJ. 


iiii myin kf*u •naMHm 
















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.25 Page 21 of 37 

3:06 .ii ■ 

m SdjsJsST 

h!tj55;//i.meiT2FTants_Laidis 

iJ^morcymous 04/27ft9 {&*) 08:41 20 ID: SSQ2SS 
N0.13192485 

: ssismmm 

Flicking videos .see the Iasi h*© in fcsl f-G diamesl. i 
; -past fuefcihg 

05*} 08:42:2110:006581 

"mimrnrn »i mmim *ggMs^m 

Jewsdosni mm te&m, 

ypn*njm«Wi» 04/27/1M£aL) 08:4341 10:550293 
NoJ3f92492 

»zmmm 

When you are so peJEhetiGt that see lakes everywhere. 

»wl3Pwi 

lypnofiymou* 04J2Wi;9 ($M]< 08 44:4310:260113 
NolI 31i92496 »^31TOSQg . >>331525136 »tyt33?1i : J<M51°giSS. 

PfefSSleywuf lr^.» someor^w^fcytiSui 
France, tfoere es a a^oundifig amotml of mosJims. 

Uftnoiiymous 0*mm | Sal) O0:4&29 ID: 280103 

mimmmz mmm- 



6y| hey, i vVhde is. a^sm, ie»o?i?3Si«w3i 

more, a rmisfen (especsaiy a saodniggerjis so stupid 

they can't dd muicii harm. 

y w&tm t$m mmm ©t 550235 

WelMSaSOS >*awgsg 

Hew I drop Videos here? Keep 1 geiSh® INS emon 
MP4 mm bemepe ypelon«i^84 and ene AaC 
stream only. 

IJ^erwymaui. CMi27W9|Sa|| 08^8:34 ID: «98225 
WaLt3iffiS12 »Maaaa5s 

That seems lo suggest diat your video has dual 
audio. You have snip ora of tfa® aMsSo s&eam® out 
using fttnpe^ o^svwvpeehHipepvK to be ebfie 




















Case 3:19-mj-01755-JLB 

3:06^ 


Document 1 Filed 04/29/19 PagelD.26 Page 22 of 37 

■h 


fi Sefwset 











HI 






ri v.'. 




, 'W ■■ ■ ■ ■■'- ^ 


ran 


lii 


I ‘ 

jt 

I,. '; 

H 7 

■sh 

1 

KV » . ..V J . 


lg IS®! 

iWsfi 

■ s - k, i7c \ 

I!;' • ■■ :■■ ■ 

i ■ 


'AavA- 



































Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.27 Page 23 of 37 



■ 'laiD'i?/ 

mime® 

NolI 31192832 ' 

Rle IMS&K Jap cs*f m, 


Sfimea, ss «r„ i 'WFmt aa m 



pile mm ifew *»• 


2*fo2*6, as*:2*8, © £9 



»a,'«> i ha<fc.awaia; 














Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.28 Page 24 of 37 

l Sefenet 



04/27/19 {Sal) G£04:;37 ID: Sea4a 

NaltijMSSZ 

.;': - /'¥bti : Hinri ^eflq%^-sac«n#iir^j jwms 

intend on: an*? wfli 


yUnonymous 04/27/19(;$®l) mmm"K,: 

»isass576 >»-t3K8ZBM- - ■ 

*»j.a3ieg23 

What tie- fuck shooing sfyfe is this. You inow a 

”drhnM*v‘“ i wbnaJto i#*»«*ifc <iii> mm* m y>w sfcwurtrt to 

takjaaahQt. 

Gafaaga 


|jM%onpnmi» W& {$«) Q&MM O: tl&cat 
Kio.13492556 



The v*ta* ha* escalated 






















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.29 Page 25 of 37 

3:09* .i ■ > 

m Bcthfvei 

NM31925TO mm >>i-ai«hSM. . 

. ■ >>13192523 

did he shoot at anyttwig? The first iMMe is jjust gun 
shot noises, hat no cortteJdl and fie second video 
looftS IfcG ijusi shoc&n^ mio She n*gN- 

IJldianfsf.Hi’i&usi, 4Kl2?irf9'4Sal) 09;$7:32 ID 26*113 
No.131192561 

Fite »:k mmm, mm. m.m. 

jlSwftaiftcggl . ,am> ftfl gaS. 


* * 

i 


■mmmsn 

A&SOiul® tegshdl 

Ufeiofnymwu® 04/27/19 mm ©9D?:45 ID: 17S2B5 
■ N&-13192562 >»t3is3sra 

»13192560 

Tfch i mas a^dnq mysef Shat lo© 


tJVnonymou® 0«CTft9 {SattQttOftSI ID: 60*<3&4 
hio.i 3192565 

Rerrwnder Is only post Shi Sto& tf*S cNtjy^h Tor unless 
you want a ws* font MetpoL 

Anonymous 64AW19 «&0£29 ID Sfc®79 

No. 13192968 ^jsisEsri saig2|t$: >>if.i|g3S i 

>*i"i he shr-ct o" a—i*- ~r* 

No. 

The guy’s just tecmg offl 'Srewortes- 


















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.30 Page 26 of 37 

3:10 ■ .ii ? ■ 

m seftfiti 

Tbh thias 


^Anonymous KM# 7 rt 9 (Sa*) 0 Sd* 8:31 BteOadM 

R«f#9darloo!(% pral sJtii Kb tws through Tor unfess 

iyjMai^mdus 9 (Sal} 09jd#39ID: 

No .13192566 > 

zmmm 

”€• s-ho-c-!; a“ 

Tl&e gyy s just letting ofl! Kreworte. 

Uftnonymew® Wmm (&»} 09.0930 ID: 2SSW3- 

uo.nnm^ 

Fife abMSPiggitiaMSS- ■ r.vna jfSW M f&.mgS#*, mMf. 





>>13192523 

Mfusims and arafts |sandnijggBre|i cart suck sny dick, 


ly^Vncnyrnou*. Wmm {SaSJ 09:1012 ID: a6dS$4 
Nol13t9(2S?i 

Tarrartl iftraiiced into a arowsSed area and shoe than. 
Ydsw bwddy is dasng nigger Imf stfl 

Otoeawmeus <N02M9 {$a8}G&lCl:3i$i IQ: 2de262 
Mai 3192573 















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.31 Page 27 of 37 

3 : 13 ^ 

A Seftiw 



.; v'ls 

ws ; ' 

v , ' 

•f-'-.-V-V'-' • .. .•/. 

• - ' ■ ■ >v- 

r'« Vy, ,r ‘«‘ if.’ iv* 

1' -<<. V;:’A •■•-V- 

- ; ' ‘ ' s 






VOTKtff 




ssb&u 


I «B5BgB £l 


IS#. $$*•£? ? S& 

[■ m: 

liv 

*?&£W3% 


$$888 




7;: 




















Case 3:19-mj- 


B Document! Filed 04/29/19 Pag.elD.32 Page 28 of 37 


: fi Scbsm 



forever. Most likety not for the better. 


tifrmnymw* W&tn (Sal) Umm ID: 1x3969 

mmmm 

>>13193896 

almost all large scale rmi^zie temxrst attacks wore 
proxy by ZQG 

kys you genetic garbage 























Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.33 Page 29 of 37 

12 : 2 §-f ->■ ♦ O 


A fidt/WC 



O^nonymous- MBITO (SM) 12: tS SS ID: 8MSI2 
N&J31S3248 rnmsm &s&xm >, 1?'*'83SSSS 

»1319«23Q fpiwMiymw 04E7/19 {Salty 12:11:40 

v&k i just m ©: 2ce?@s$ Me. 13193230 ^hmz 
^ heppwing..... **mm» 


iav!|fDirae<llia(il.»*iBK3HnCii?Bsd C7f 


oewt^r^scofK 

areon-unSI-SO' 


L^nooyrmeu* Otttftffli {Sat* 12:10:3* IP: s c 3 8> » 

Noi13193252 »>J33S(32B9 »»5K3G06S .»13t»K?2- 

. : 111 " ' ' . ' '. ' "' n ' ..- •’ ' ' '■'.' 

>*13183346 Itart 

m? m* 29is m i & 

&M PM POT m to' 25; 3Qp|f 

U^nof^nous :{Vbta£ : 0«27/f $ (Sat)121646 ID: SWS12 
N&1 3183354 wKXSiaw . 

»mm24B m*A 

Id 


UMorepnmjs 0ti27/t9 {Salty 12:17.49 «% dftteS 
N©J3t932S9 

Fite thrieV S2&9369d1 Sdb374--.!pnfl i *asc 2 »i. 



























Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.34 Page 30 of 37 

12:25^ .ii 

m SehJWi 

iiu rarHaysro ma-cr aiun ikid 

ly^nonymow* 04/27^19(5*0 12:17:49 ID: c*3te8 

►itol 3*93439 

File Ihidfr lc S2®93&9d 1 Sd&374- • • png tiZzjB' «e&. rtoKtoi. 

T*&1K!^31=ftfa6aa>2 iE2g*iJ&. jSjM 



■ mmim 

its v&ry much wfiSso ter W. he (JOGS into same 
&$i wi &tm» mem ws «*ed afeout tvm 

you should start gefttog prepared. He doesn't hold 
bed;, trocrc usaog^ /pot/ approved 1 tornres. a«d parses in 
pretty broad brushes, Ctoefts pages ffimm Ns 

' signature) sod thafs the longestPd wart ft to be.tbit. 
Tarrant was a utiuch more arirajtatB writer, and! 
wslMod mrooghNs iiougbl process ;much more., 
which leads to people b@tog : atote to undMind 1 (even 
if they cant pdbidy admit) why he <fid what he rid. 

- Earnest's honest ipasston is his ‘hipifigM.a^ his 
weakness - m boomer. « to read toto into 

suddenly become aware of the JQ. 

4J&-n©ffiynsous 04J2M9 (Sad) 1.2:1759 ID: Seec5>2 
No.13t93!261 >>tlraggg& 

Fishing I toetehJial loo. 

This whole tKngi t$ a uiP to gel pew to feerto a 
Facsfeocrit account to owftsiuptd people. It'S a dever 
gtcrwnfggrer Jacbc. bujL.imbb. Whatever. 

l^-nowymous 04^2'7i i t9 (Sat) 12:1739 fit 73c7&8 
No.13t®3262 

File fmdc K o53aMlSd742^S- - -.wehwi p.i* | m tjcm®:. xz 

m m &*¥ wwi po op] 



















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.35 Page 31 of 37 

1225* .ii ^ ■ 

m 

O4£9in»<$a0 12-19:29 ID: 000000 

Nal 31933S8 

2il32aiMg 

Anybody iwt already act least on lor or a vpn is jHacyrng 
wtfo Fff« here., donit pH yourselves caught before 
sefoaijr m eficw 

He seiO he burned! mat timque after Tarrant 

no! mow. 

So it stS checks del 

i^nonymous <M£Wr9{Sdl)1.2:19:32 ID: 070205 
Nal31i32®9 

Fite ftwAH C 7<jjtete^2f5a?2b0~ • ■ pm qosns«B. imaMX, axsjia, 

:s*v: : mi m-m 



•j r 3 »-K*;-i **» "~t \Aon -ar-i > r 
a»;?.v». * m.iw f! fiif »rr. « t ^ 

toi .es*v -.in 


^ “a.««’ •*te“ sr 



GUYS 

Ij4ii«iiiry,iss#u* mmm ($&} wmis id; 

Na131i9(3271 

Fite mm m '* »******* «***». 

rBQ 3c?iE in charge af garifi. - ^ ; 



mm } *v/* * ’.j* e«; s^i'- • «&. at* . » 

«■/ «£m rc^sz* te.-OK-v-tBi '**2' .£"t- 


Vlrvf 



















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.36 Page 32 of 37 

12126 f .il ^ ■ 

m BdTLmt 

profoafoly to throw off me stoppyjotonwasadi retards 
claiming larrasit sSdnt name the jew so in a way he 
wowW be a witty to of^poaa 

masterpiece 

l^norvyrnoys mw 04OT/19 CSM} 12:2020 ©; 8*4812 

NO -1 |li 93 t ?5 ■ ». 1 .Siia 3 i 294 - 

Read 

Me admits he toasted the mosque and! memes Si BT 

Ofitnon^mouS: <M2?n& fjSatJ 1 23&3& ID: 1S&84S 
No.13193277 >»riV3KZ54 

mmmm 

»i 3193272 

'OhONihanWiftetfaMiheM 1 


tJSmonymous mmm CSaS) 1222M Kfc SJSra?' 
N&13W3282 .ttOSn» 

&wwBa 

AMD THERE WE QQ 

mmm ($«) nmM © qtbzbs 

Np. 13:193283 

Fite p\ideK ZliMatagtbJSte —ttaam smsuM. 

;: »3agm^iiw^.aaar t%i fea• 

22 

Multiple people gunned down 
at Poway Synagogue, police 
search for shooter 


Fii&sed* 12:11 MLAp 27. 2019 Updated: S •*!!"'' A$;‘Af 

m 


















Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.37 Page 33 of 37 

12:26 ^ .ii ■s? ■ 

m SefUWft 

wmm CS^J IZ'JttHO ID: 075205 

uoMmm 

Fite (hute-'K 7 gg - • : png; 263. 

g- 

■' ^a^'rg^mirtK.ir : ^: ■ .' ■ ...- k s . :.. :.. .'■ .. 


say m mm me &m&. hail, john “the 

EARNEST * 8 EARNEST! 


cm mmm im n m sneis 

HaA$mam 

Wb4 ShOCrtW In £&i Iw0#t 


Anonymous ©4/27/49 (Sd) 12:23:24 ID: 5471dd 
N 0.13193291 

Did he (frestraarn ft? 


y|Anowymous 04/27719 (Saty 12:235? ID: 5e©e§2 
N&1 3133294 

msmm 

>'#&■ 

Ym tontmH mm M HE fee fir*. At a 

mosque in Caiiarraa, apiparentfy. 'Kudos, on 
: >>.13113275 lor eafcHrigi that 
3193246 flfciil 

Do you guysiiinfcwehe^;^^ 

Domer" scenario? is,he on the move? 


l 3 Aaepwfte»u» mmm cs^} tzmm 10 oooooo 

Noil 3199295' >» a !:S , S93a5S 


Hopehally Ihis was ml the i\appen*ng: 


Steve Werby 
^slBVBwertiy 
2Ss29 seKmds ago 


DliUiurk iiii kifk i,! .fffrrulit 























Case 3:19-mj-0l755-JLB Document 1 Filed 04/29/19 PagelD.38 Page 34 of 37 

WM* 

m 8d!wet: 


SAY If WITH ME GUYS: MAIL. JOHN; "THE 
EARNEST* EARNEST! 


U^onymous 0«zm9 (Sal) 1223:24 K> 547 Idd! 
No. 13493291 

Otid he irastraam I? 


MJ27TC9 (SaO 122357 Et 5«se52 

u&mmm 

>*13193277 

>Ws 

£gj¥biji havenl doneilvi. : 8ra fins. Aa a 

TTicieqiJQ n Cafemia, apparenfiy. Kadtosom 

wMtm ttirik &m*m mtL 

*>13193246 

Do you’gHjyEttiirtkwe have anolhsr Xanl-Corner the 
OOrtttT ramriff is ho on Ihonwro? 


OttgfrliO (Sat) l£24:07 ID: 000000 

NoLiS’tasass. »i3i^s3^ 

Hopefully this, nnas nol happening: . 










Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.39 Page 35 of 37 

£ fiCft/iil 


mmm. ism m seeesa 

''Moui 3 l 932 M--'- 


>We. 

Ywi dwwsNt 



»>t3 f so a r s mtifa emMm i 
»mgaa4B .«w. 


DoW scenario? «s he cum 9m mwe? 


tjtaanpncnw 04127/19 (Sal) 12:24:07 K> €100000 

iHtoptfijlfy ifits- was ooi tie fcapflenifigr 



3 w®t» WQi wy 



Shoots ®* Oha&ed of Pi»i^,CiS* 9 mia,Jijs« 

across city c* Diego bgrater. During refcgioos 
bbtotcbs. Al least erne pcraon .shoL 2 chiefcai njutsd. 
2 fcfiklien f rws^&i raQ,- ^sauwee is deputy ¥»a ' 

Cfted o&oweisBifcfn. pc#c6 : Swiid, end erf 

pefsomal Chained. . 

Be aware of iraoeased taw afoca nai acimty In tfra 
16000 Hoc* ef Ctiabatf w*y » $$0$OPt**ay 
Deputies liwaetigeie- reports di a naan *rfh a oil 



iJIsronymous mmm (Sal) 1224:07 ID: 978 aS 2 
No. 13193296 

Fi& (hist®)- eae?3See73eSiQi. .m $mmm> *mai& K w^iss. 























1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 


Case 3:19-mj-01755-JLB Document 1 Filed 04/29/19 PagelD.40 Page 36 of 37 


ATTACHMENT A 


This warrant applies to information associated with 8chan posting with 
4e267a and No. 13192921 and all postings by individuals who res ponded to said 


icfot al 


posting and/trf about the posting, owned, maintained, controlled, or 

operated by 8ch.net, 9120 Double Diamond Parkway, Suite 5901, Reno, NV 89521. 
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AO 106 (Rev. 04/10) Application for a Search Warrant 


United States District Court FJLFQ 



for the 

Southern District of California 


In the Matter of the Search of 


(Briefly describe the property to be searched 
or identify the person by name and address) 

Information that is stored at Facebook, 

1601 Willow Road, Menlo Park, California 94025 


Case No. 



CLERK US DlS'l h'lC 1 COURT 
SOUTHERN DIjJIHiCI OK CALIFORNIA 
DEPUTY 


APPLICATION FOR A SEARCH WARRA 


CASE UNSEALED PER ORDER OF COURT 

J9MJ1756 


I, a federal law enforcement officer or an attorney for the government, request a search warrant and state under 
penalty of perjury that I have reason to believe that on the following person or property (identify the person or describe the 
property to be searched and give its location): 


See Attachment A 

located in the Northern District of _ California _, there is now concealed (identify the 

person or describe the property to be seized)'. 


See Attachment B 


The basis for the search under Fed. R. Crim. P. 41(c) is (check one or more)'. 
sf evidence of a crime; 

'Sf contraband, fruits of crime, or other items illegally possessed; 

□ property designed for use, intended for use, or used in committing a crime; 

□ a person to be arrested or a person who is unlawfully restrained. 

The search is related to a violation of: 

Code Section Offense Description 

18 U.S.C. § 247(a)(2); Intentional obstruction by force of persons in the free exercise of religious belief; 

18 U.S.C. § 249(a)(1); Willfully causing bodily injury to persons through the use of a firearm because of 

18 U.S.C. § 247(a)(1) their actual or perceived religion; damage to religious property 

The application is based on these facts: 

See attached affidavit of ATF Senior Special Agent Matthew Beals 


M Continued on the attached sheet. 

□ Delayed notice of_days (give exact ending date if more than 30 days: _) is requested 

under 18 U.S.C. § 3103a, the basis of which is set forth on the attached sheet. 

CTUUa %/<svu..w-^. 

Applicant’s signature 


Sworn to before me and signed in my presence. 
Date: 

City and state: San Diego, California _ 


FBI Special Agent Maria Solomon 

Printed name and title 
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ATTACHMENT A 


This warrant applies to information associated with following Facebook 
accounts: 

Facebook ID Account Number 100027636555708, with Facebook User Name 
"John Earnest”; and 

Facebook ID Account Number 100005829157939, with Facebook | 
Username: “John Tocatina,” 

that are stored at premises owned, maintained, controlled, or operated by Facebook, 
1601 Willow Road, Menlo Park, California 94025 


i 





Case 3:19-mj-01756-JLB Document 1 Filed 04/29/19 PagelD.7 Page 3 of 23 


ATTACHMENT B 


I. Service of Warrant 

The officer executing the warrant shall permit Facebook, as custodian of the 
computer files described in Section II below, to locate the files and copy them onto 
removable electronic storage media and deliver the same to the officer. 

II. Items Subject to Seizure 

All registration information; Phone and associated devices; Trusted devices; Deleted 
friends; Last location; IP history; Stored video and audio direct message 
communications; Any and all accounts associated by cookie; User Names and 
profile names; E-mail addresses and passwords; Any and all live stream video 
associated with account; Profile information; Friends information; Private messages 
in the user’s inbox, sent messages, trash/deleted messages, notifications and updates 
involving any and all user; Chat information in the user’s inbox, sent messages, 
trash/deleted messages, notifications and updates involving any and, all user; IP logs 
(which includes the date stamps of the IP logs at login), initial login IP address and 
account activity and other information including name, address, phone number and 
other screen names that may tend to identify the user; and any other files associated 
with the following accounts: 

Facebook ID Account Number 100027636555708, with Facebook User Name 
"John Earnest”; and 

Facebook ID Account Number 100005829157939, with Facebook | 
Username: “John Tocatina,” 

(hereinafter, the “SUBJECT ACCOUNTS”). The search of the data supplied by 
Facebook, Inc., pursuant to this warrant will be conducted as provided in the 
“Procedures for Electronically Stored Information” of the affidavit submitted in 
support of this search warrant and will be limited to: 

a. Communications, data, or attachments relating to the research, 
purchase, or acquisition of firearms, and the research or manufacture of incendiary 
or explosive devices; 


li 





Case 3:19-mj-01756-JLB Document 1 Filed 04/29/19 PagelD.8 Page 4 of 23 


b. Communications, data, or attachments tending to identify others 
involved in the criminal activity described below; 

c. Communications, data, or attachments third parties with whom John 
Ernest discussed the criminal activities described below; 

d. Communications, data, or attachments relating to John Earnests’ 
motivation and bias for committing the criminal activities described below; 

e. Communications, data, or attachments relating to the research of, visits 
to, or other connections with the Synagogue located on Chabad Way in Poway, 
California, and/or the Dar-ul-Arqam Mosque and Islamic Center (the “mosque”), 
located at 318 West 6th Avenue in Escondido, California; 

f. Communications, data, or attachments relating to the research or 
viewing of news articles and reports about the arson that occurred at the mosque in 
Escondido, California on March 24, 2019, or criminal acts committed by other 
individuals involving criminal activity described below; 

g. Communications, data, or attachments relating to recruiting and 
inspiring individuals to engage in the criminal activity described below; 

h. Communications, data, or attachments relating to the whereabouts of 
John Earnest and any criminal associates or co-conspirators at the of the April 27, 
2019, shooting at the synagogue on Chabad Way in Poway, and the March 24,2019, 
arson of the mosque in Escondido, California; 

i. Communications, data, or attachments that tend to provide context to 
the information described above, such as direct messages sent or received in 
temporal proximity to any relevant communications, or communications, data, or 
attachments tending to identify the user of or person with control over the 

SUBJECT ACCOUNTS. 


in 
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during the time period from January 1, 2017, through April 27, 2019, which tend to 
prove violations of federal law, namely, intentional obstruction, by force or threat of 
force, of persons in the free exercise of religious belief, resulting in death, in 
violation of 18 U.S.C. § 247(a)(2), willfully causing bodily injury to persons through 
the use of a firearm because of the actual or perceived religion of said persons, 
resulting in death, in violation of 18 U.S.C. § 249(a)(1), and damage to religious 
property, in violation of 18 U.S.C. § 247(a)(1). 


IV 
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AFFIDAVIT IN SUPPORT OF APPLICATION FOR SEARCH WARRANT 

I, Maria Solomon, being duly sworn, state: 

I. INTRODUCTION 

1. This affidavit is submitted in support of an application for a search 

warrant pursuant to 18 U.S.C. 2703(a), 2703(b)(1)(A), and 2703(c)(1)(A), for 

information associated with the following Facebook accounts: 

FacebookID AccountNumber 100027636555708, with Facebook User Name 
"John Earnest”; and 

FacebookID AccountNumber 100005829157939, withFacebook Username: 
“John Tocatina,” 

(hereinafter the “SUBJECT ACCOUNTS”), used by John Earnest, and stored at 
the premises owned, maintained, controlled, or operated by Facebook, 1601 Willow 
Road, Menlo Park, California 94025, more fully described in Attachment A. 

2. As more fully described herein, there is probable cause to believe that 
within the SUBJECT ACCOUNTS, more fully described in Attachment A, will be 
found evidence of violations of federal law, namely, intentional obstruction, by force 
or threat of force of persons in the free exercise of religious belief, resulting in death, 
in violation of 18 U.S.C. § 247(a)(2), willfully causing bodily injury to persons 
through the use of a firearm because of the actual or perceived religion of said 
persons, resulting in death, in violation of 18 U.S.C. § 249(a)(1), and damage to 
religious property, in violation of 18 U.S.C. § 247(a)(1), as more fully described in 
Attachment B. 

II. EXPERIENCE AND TRAINING 

3. Iam Special Agent with the Federal Bureau of Investigation (“FBI”) 
and have been so employed as such for eight years. I am currently assigned to the 
San Diego FBI Joint Terrorism Task Force (“JTTF”) and have been assigned to this 
position since 2015. Prior to being assigned to the JTTF, I investigated National 
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Security matters including espionage and proliferation. I have received extensive 
training in evidence collection to include post blast investigations and served on the 
FBI’s Evidence Response Team for six years. As part of my duties as a Special 
Agent, I am have been responsible for investigation violations of federal law, 
including violations of material support to terrorism, espionage, weapons 
proliferation and weapons of mass destruction. 

4. My knowledge of the facts alleged in this affidavit arises from my 
training and experience, my personal observations, my participation in the federal 
investigation described herein, my conversations with other law enforcement agents, 
and my review of documents obtained during this investigation. Because this 
affidavit is submitted for the limited purpose of securing a search warrant as 
described herein, it does not include every fact known to me concerning this 
investigation. 

III. FACEBOOK 

5. Facebook owns and operates a free-access social networking website 
of the same name that can be accessed at http://www.facebook.com. Facebook 
allows its users to establish accounts with Facebook, and users can then use their 
accounts to share written news, photographs, videos, and other information with 
other Facebook users, and sometimes with the general public. 

6. Facebook asks users to provide basic contact and personal identifying 
information to Facebook, either during the registration process or thereafter. This 
information may include the user’s full name, birth date, gender, contact e-mail 
addresses, Facebook, passwords, Facebook security questions and answers (for 
passwords retrieval), physical address (including city, state, and zip code), telephone 
numbers, screen names, websites, and other personal identifiers. Facebook also 
assigns a user identification number to each account. 
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7. Facebook users may join one or more groups or networks to connect 
and interact with other users who are members of the same group or network. 
Facebook assigns a group identification number to each group. A Facebook user can 
also connect directly with individual Facebook users by sending each user a “Friend 
request.” If the recipient of a “Friend request” accepts the requests, then the two 
users will become “Friends” for the purposes of Facebook and can exchange 
communications or view information about each other. Each Facebook user’s 
account includes a list of that user’s “Friends” and a “News Feed, “which highlights 
information about the user’s “Friends,” such as status updates, profile changes, 
upcoming events, and birthdays. 

8. Facebook users can select different levels of privacy for the 
communications and information associate with their Facebook accounts. By 
adjusting these privacy settings, a Facebook user can make information available 
only to himself or herself, to particular Facebook users. A Facebook user can also 
create “lists” of Facebook friends to facilitate the application of these privacy 
settings. Facebook accounts also include other account settings that user can adjust 
to control, for example, the types of notifications they receive from Facebook. 

9. Facebook users can create profiles that include photographs, lists of 
personal interests, and other information. Facebook users can also post “status” 
updates about their whereabouts and actions, as well as links to videos, photographs, 
articles, and other items available elsewhere on the Internet. A particular user’s 
profile page also includes a “Wall,” which is a space where the user and his or her 
“Friends” can post messages, attachments, and links that will typically be visible to 
anyone who can view the user’s profile. 

10. Facebook has a Photos application, where users can upload an 
unlimited number of albums and photos. Another feature of the Photos application 
is the ability to “tag” (i.e., label) other Facebook users in a photo or video. For 
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Facebook’s purposes, the photos associated with a user’s account will include all 
photos upload by that user that have not been deleted, as well as all photos uploaded 
by any user that have that user tagged in them. 

11. Facebook users can exchange private messages on Facebook with other 
users. These messages, which are similar to e-mail message, are sent to the 
recipient’s “Inbox” on Facebook, which also stores copies of messages sent by the 
recipient, as well as other information. Facebook users can also post comments on 
the Facebook profiles of other users or on their own profiles; such comments are 
typically associated with a specific posting or item on the profile. In addition, 
Facebook has a Chat feature that allows users to send and receive instant messages 
through Facebook. These chat communications are stored in the chat history for the 
account. Facebook also has a Video Calling feature, and although Facebook does 
not record the calls themselves, it does keep records of the date of each call. 

IV. PROBABLE CAUSE 

12. During the course of my current duties, I have learned the following 
from consulting with other state, local and federal law enforcement officers, 
including San Diego Sheriffs Department (SDSD) Detectives, San Diego County 
District Attorney Investigators, and my fellow FBI agents. 

13. On April 27, 2019 at approximately 11:23 am. San Diego Sheriffs 
Communication Center received a 911 call of shots fired at the Synagogue located 
on Chabad Way in Poway. The reporting party, Dan Sedereff, stated shots were 
fired in the synagogue. 

14. During a briefing by the SDSD following the incident, it was reported 
that a white male, later identified as John Earnest, entered the synagogue through 
the front door and fired several rounds from an AR15 rifle. He then proceeded 
further into the synagogue where he began firing rounds from a handgun. 
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15. The SDSD stated that inside the synagogue was off-duty Border Patrol 
Agent Jonathan Morales who retrieved a revolver weapon from one of the 
congregation members and chased the suspect out of synagogue firing four shots at 
him as he got into a silver Honda that was parked across the street from the church. 
The Honda fled northbound on Rancho Bernardo Road. Morales then returned the 
gun to the congregation members who placed it in a black prayer bag and left it in 
the synagogue. 

16. It was determined by officers that four people were shot and transported 
to the hospital. 

17. SDSD Deputies responded to the synagogue along with paramedics. 
The synagogue was secured by deputies pending obtaining a search warrant from 
state authorities, which was planned to be executed later that day. 

18. The same day (April 27, 2019), at approximately 11:30 a.m., a male 
who identified himself as John Earnest called into California Highway Patrol 
emergency line stating that he had fired shots into the synagogue and was willing to 
surrender to law enforcement. Earnest called from phone number 858.999.1461. 
Earnest gave his location as Phil's BBQ at 17051 West Bernardo Center Dr. He 
stated he was in possession of an AR15 Smith & Wesson MP15 rifle and several 
rounds of ammunition in his vehicle but that he would not use them against law 
enforcement. During that call, Earnest made the following comments, among others: 
“I just shot up a synagogue. I’m defending my country . . . I’m just trying to defend 
my nation against the Jewish people; they’re destroying our people ... I opened fire 
at a synagogue; I think I killed some people.” I am informed and believed that Smith 
& Wesson does not manufacture firearms in the State of California. 

19. San Diego Police Department (“SDPD”) Officers responded to that 
location and took John Earnest into custody without further incident. Seen on the 
front passenger seat was an AR15 rifle but no handgun was visible. Additionally, in 
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the vehicle was a helmet with a Go-Pro camera on it. SDPD Officers were holding 
the vehicle secure at the location pending obtaining and executing a state search 
warrant. 

20. While on scene at the vehicle, it was learned that one of the victims, 
Laurie Kay, died as a result of gunshot wounds. 

21. During a public safety interview with SDPD Detective Rudy Castro, 
John Earnest confirmed his home address as 10134 Freeport Ct., San Diego CA. He 
further stated that there were no further weapons at the home. At that time, Earnest 
did not appear to be under the influence of a controlled substance but did appear to 
have a "fl at affect" as though he was detached or unaffected by his actions. 

22. SDPD SWAT officers and Detectives responded to the residence on 
Freeport Ct. The parents of the suspect were contacted and escorted from the home 
and taken to the Sheriff’s Poway substation, pending the execution of a state search 
warrant on their residence. While at the substation, the parents informed law 
enforcement that their son frequently uses a computer in their home. 

23. Using various search methods, Whitney Buckingham an SDSD system 
data miner, found a manifesto on Pastebin.com written by a person identifying 
himself as John Earnest. In the manifesto, which he named "An Open Letter", 
Earnest made many anti-sematic and anti-muslim statements. One such statement 
which is a direct quote is, "As an individual, I can only kill so many Jews." He states 
he is not a terrorist but that he hates anyone who he sees as a threat to his country. 
Earnest took credit for a fire that had been set at mosque in Escondido a few weeks 
earlier. His exact statement was "I scorched a mosque in Escondido with gasoline a 
week after Brenton Tarrant's sacrifice and they never found shit on me." 
Additionally, he wrote "I spray-painted on the parking lot. I wrote 'For Brenton 
Tarrant -t./pol/." 
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24. I observed part of the post-Miranda statement of Earnest. During that 
interview, he informed an SDSD Detective that he had adopted his ideology of hate 
for members of the Jewish religion approximately 18 month earlier. Based on my 
training and experience, I know that there is a process in which someone undergoes 
adoption of radical ideologies. This process can take several months or several years 
before a person actually commits to those ideologies. During the interview, Earnest 
also stated that he was inspired by individuals such as Adolph Hitler and Brenton 
Tarrant. 

25. Based on information received from Bureau of Alcohol, Tobacco, 
Firearms and Explosives (“ATF”) Special Agent Scott Brahin, on March 24, 2019, 
an unknown individual set fire to a mosque in Escondido, California. 

26. Specifically, on March 24, 2019, at approximately 3:19 a.m., a 911 call 
was placed to report a fire at the Dar-ul-Arqam Mosque and Islamic Center 
(“mosque”), located at 318 West 6th Avenue in Escondido, California. The 
Escondido Fire Department and then Escondido Police Department (“EPD”) 
responded. First responders learned approximately seven individuals had been 
spending the night at the mosque and, at approximately 3:15 a.m., they had observed 
flames and rushed outside to extinguish them with a fire extinguisher. First 
responders noticed ash or charring along approximately half the length of the 
mosque’s west side and spray-painted writing on the asphalt parking lot near where 
the fire had occurred that read, “FOR BRENTON TARRAN r/pol/.” First responders 
also noticed the odor of, or similar to, gasoline at the location of the fire. 

27. Investigators conducted an online search for “Brenton Tarran” and 
noted that he was arrested for the mass shootings at two mosques in New Zealand 
that occurred on March 15, 2019 and is believed to be a white supremacist. 
Investigators also learned “r/pol/” is a reference to an online political discussion 
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board that has been characterized as predominately racist, espousing views 
embraced by white supremacist groups. 

28. Investigators reviewed surveillance footage retrieved from a business 

across the street from the mosque. The camera recorded an individual (“suspect”) 
park his/her four-door sedan in front of the mosque at approximately 3:00 a.m. In 
the video, the suspect exited the vehicle, walked towards the parking lot where the 
message was later found spray painted, and then returned to the vehicle. Shortly 
thereafter, the suspect again exited the car carrying a large container and walked 
toward the area of the mosque where the fire was set. A short time later, at 
approximately 3:15 a.m., a large flash of light and smoke are seen in the video and 
the suspect walked back to the vehicle and drove away westbound on West 6th 
Avenue. In surveillance videos obtained from businesses along the route, 
investigators observed that the suspect appeared to arrive at the mosque on March 
24,2019 by driving eastbound on West 9th Avenue, northbound on South Escondido 
Boulevard, and then westbound on West 6th Avenue, where he parked in front of 
the mosque. Investigators also observed, as noted above, that the suspect left the area 
by driving westbound on West 6th Avenue. Based on their review of surveillance 
videos, investigators believed that the suspect was driving a 2010 to 2015 Civic 
Honda, silver in color. A 

29. Earnest’s statements in the manifesto that he set fire to the Escondido 
mosque on March 24, 2019, is corroborated by the following. At the time of his 
arrest for the synagogue shooting, Earnest was driving a 2012 Honda Civic, grey in 
color. Additionally, the spray painted message left by the mosque arsonist was not 
released to the media. The fact that the manifesto specifically makes reference to 
that message further corroborates that Earnest committed the mosque arson. 

30. On April 27, 2019, Greg Simon of the SDPD located and viewed an 
open source online post regarding the shooting at the synagogue. The post 
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purportedly contains a livestream link referencing the shooting at 
https://www.facebook.com/iohn.eamest.96780 (i.e., Facebook Account Number 
100035547390347, with user name “john.eamest.96780.” 

31. On April 27, 2019, following the synagogue shooting, FBI Special 
Agent Scott Norris submitted a request to Facebook for emergency disclosure of 
records for the “john.eamest.96780” Facebook account, pursuant to 18 U.S.C. 
§ 2702. In response to that request, the Facebook provided records which listed the 
user’s phone as 858.999.1461 (the same number Ernest used to call the CHP on April 
27, 2019). Facebook verified the number on April 7, 2019. Facebook identified two 
additional Facebook accounts possibly utilized by the user of the john.eamest.96780 
Facebook account, which were accessed via the same browser and the same 
electronic device. Those accounts are the SUBJECT ACCOUNTS. The-response 


aNo~indicatcdAhat-the-user^f^3hnne-number-^fj^^997l'4'6i _ ftlTC“sarrremuTri'b'er 
Emes t -used4e-eall- * 



Opinions and Conclusions 

32. I know from my training and experience, including consultation with 
other law enforcement agents, in investigations involving Facebook that electronic 
service providers maintain business records that include information listed under the 
Items Subject to Seizure in Attachment B. 

33. Based on my training and experience, including consultation with other 
agents involved in the investigation and prosecution of hate crimes, I know the 
following: 


a. It is common for individuals who commit hate crimes to discuss 
such matters, with co-conspirators via telephone, text messages, emails and social 
media - both before and after such crimes - for the purpose of planning and 
providing updates to one another. 
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b. It is also common that individuals who commit hate crimes to 
discuss their criminal activities with trusted third parties, including friends or loved 
ones, before and after the commission of such crimes, via text messages, emails and 
social media. 

c. It is also common for such individuals who commit hate crimes 
to communicate with other like-minded individuals who support their ideologies, 
beliefs and violent actions, via text messages, emails and social media; 

d. It is common for individuals who commit hate crimes to visit or 
research the planned site of the crimes, prior to committing said crimes, for the 
purposes of planning the successful execution of their criminal activity and their 
getaway, and evidence of such research or prior connection may be in their social 
media sites, including private messaging with third parties; 

e. It is common for individuals who commit hate crimes to post 
statements or send messages to others regarding their bias and motivation for 
committing such crimes, which evidence may be found in their social media sites, 
including private messaging with third parties; 

f. It is common for individuals who commit hate crimes to conduct 
research regarding hate crimes committed by themselves and others, and evidence 
of such research may be found in their social media sites, including private 
messaging with third parties; 

g. It is common for individuals who commit hate crimes to recruit 
others individuals to adopt their ideological beliefs and inspire others to commit 
violent acts in support of those beliefs, and evidence of such recruitment may be 
found in their social media sites, including private messaging with third parties. 

h. It is common for individuals who commit hate crimes to conduct 
research regarding the tools and means to carry out their hate crimes, including 
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research involving obtaining, manufacturing and/or using firearms, dangerous 
weapons, and incendiary and explosive devices. 

34. Based on my training and experience, and my consultation with my 
fellow agents, I also believe that the evidence I seek remains in and will be found in 
the SUBJECT ACCOUNTS despite the passage of time. Routinely, during 
previous cases involving the search of electronically stored data, relevant 
investigative information is found dating back several months or even years. 

V. SEARCH PROTOCOL 

A. Genuine Risk of Destruction of Evidence 

3 5. Based upon my experience and training, and the experience and training 
of other agents with whom I have consulted with, electronically stored data can be 
permanently deleted or modified by users possessing basic computer skills. In this 
case, only if the subject receives advance warning of the execution of this warrant, 
will there be a genuine risk of destruction of evidence. 

B. Prior Attempt to Obtain Evidence 

36. State authorities have obtained a state search warrant for the Facebook 
Account, User Name “john.eamest.96780.” As indicated above, federal agents also 
obtained emergency disclosure of limited records for the “john.eamest.96780” 
Facebook Account which information disclosed the additional SUBJECT 
ACCOUNTS. The United States is unware of any search warrant applications for 
the SUBJECT ACCOUNTS. 

C. Procedures for Electronically Stored Information 

37. Federal agents and investigative support personnel are trained and 
experienced in identifying communications relevant to the crimes under 
investigation. The personnel of Facebook are not. It would be inappropriate and 
impractical for federal agents to search the vast computer network of Facebook for 
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the relevant accounts and then to analyze the contents of those accounts on the 
premises of Facebook. The impact on Facebook’s business would be severe. 

38. Therefore, I request authority to seize all content, including electronic 
mail and attachments, stored instant messages, stored voice messages, photographs 
and any other content from the SUBJECT ACCOUNTS, as described in 
Attachment B. In order to accomplish the objective of the search warrant with a 
minimum of interference with the business activities of Facebook, to protect the 
rights of the subject of the investigation and to effectively pursue this investigation, 
authority is sought to allow Facebook to make a digital copy of the entire contents 
of the accounts subject to seizure. That copy will be provided to me or to any 
authorized federal agent. The copy will be forensically imaged and the image will 
then be analyzed to identify communications and other data subject to seizure 
pursuant to Attachment B. Relevant data will be copied to separate media. The 
original media will be sealed and maintained to establish authenticity, if necessary. 

39. Analyzing the data to be provided by Facebook may require special 
technical skills, equipment and software. It also can be very time-consuming. 
Searching by keywords, for example, often yields many thousands of “hits,” each of 
which must be reviewed in its context by the examiner to determine whether the data 
in within the scope of the warrant. Merely finding a relevant “hit” does not end the 
review process. Certain file formats do not lend themselves to keyword searches and 
keyword search text. Many common electronic mail, database and spreadsheet 
applications, which files may have been attached to electronic mail, do not store data 
as searchable text. The data is saved in a proprietary non-text format. The volume of 
storage allotted by service providers increases, the time it takes to properly analyze 
recovered data increases dramatically. 

40. Based on the foregoing, searching the recovered data for the 
information subject to seizure pursuant to this warrant may require a range of data 
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analysis techniques and may take weeks or even months. Keywords need to be 
modified continuously based upon the results obtained. The personnel conducting 
the examination will complete the analysis within (90) days of receipt of the data 
from the service provider, absent further application to this court. 

41. Based upon my experience and training, and the experience and training 
of other agents with whom I have communicated, it is necessary to review and seize 
all electronic mails that identify any users of the SUBJECT ACCOUNTS and any 
electronic mails sent or received in temporal proximity to incriminating electronic 
mails that provide context to the incrimination mails. 

42. All forensic analysis of the imaged data will employ search protocols 
directed exclusively to the identification and extraction of data within the scope of 
this warrant. 

43. FBI Special Agents have been in contact with Facebook, who is 
expecting FBI to serve them with the warrant as soon as it is signed. For that reason, 
we are requesting permission to serve the warrant on Facebook at any time, day or 
night. 

VI. REQUEST FOR SEALING AND PRECLUSION OF NOTICE 

44. Although John Earnest has been arrested by state authorities, he is 
unaware of the scope and nature of law enforcement’s investigation into his 
activities. Additionally, law enforcement is still investigating whether he acted 
alone, or conspired with others or was inspired by others. As such, there is reason 
to believe that that disclosure of the affidavit and warrant will result in destruction 
of or tampering with evidence or otherwise seriously jeopardize the investigation. 
Accordingly, it is requested that this warrant and its related materials be sealed until 
further order of the Court. In addition, pursuant to Title 18, United States Code, 
Section 2705(b), it is requested that this Court order Facebook to whom this warrant 
is directed not to notify anyone of the existence of this warrant, other than its 
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personnel essential to compliance with the execution of this warrant until October 
25, 2019, absent order from the Court. 

VII. CONCLUSION 

45. Based on the foregoing, your affiant submits that there is probable 
cause to believe that violations of federal criminal law, namely, violations of federal 
law, namely, intentional obstruction, by force or threat of force of persons in the free 
exercise of religious belief, resulting in death, in violation of 18 U.S.C. § 247(a)(2), 
willfully causing bodily injury to persons through the use of a firearm because of the 
actual or perceived religion of said persons, resulting in death, in violation of 18 
U.S.C. § 249(a)(1), and damage to religious property, in violation of 18 U.S.C. § 
247(a)(1), have occurred, and that evidence of said violations, as described in 
Attachment B will be found within the SUBJECT ACCOUNTS. 

I declare under penalty of perjury under the laws of the United States that the 
foregoing is true and correct. 



Maria Solomon 
FBI, Special Agent 


Sworn to before me this 


A^ day of April_2019 



14 









Case 3:19-mj-01756-JLB Document 1 Filed 04/29/19 PagelD.24 Page 20 of 23 


ATTACHMENT A 


This warrant applies to information associated with following Facebook 
accounts: 

Facebook ID Account Number 100027636555708, with Facebook User Name 
"John Earnest”; and 

Facebook ID Account Number 100005829157939, with Facebook | 
Username: “John Tocatina,” 

that are stored at premises owned, maintained, controlled, or operated by Facebook, 
1601 Willow Road, Menlo Park, California 94025 
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ATTACHMENT B 


I. Service of Warrant 

The officer executing the warrant shall permit Facebook, as custodian of the 
computer files described in Section II below, to locate the files and copy them onto 
removable electronic storage media and deliver the same to the officer. 

II. Items Subject to Seizure 

All registration information; Phone and associated devices; Trusted devices; Deleted 
friends; Last location; IP history; Stored video and audio direct message 
communications; Any and all accounts associated by cookie; User Names and 
profile names; E-mail addresses and passwords; Any and all live stream video 
associated with account; Profile information; Friends information; Private messages 
in the user’s inbox, sent messages, trash/deleted messages, notifications and updates 
involving any and all user; Chat information in the user’s inbox, sent messages, 
trash/deleted messages, notifications and updates involving any and all user; IP logs 
(which includes the date stamps of the IP logs at login), initial login IP address and 
account activity and other information including name, address, phone number and 
other screen names that may tend to identify the user; and any other files associated 
with the following accounts: 

Facebook ID Account Number 100027636555708, with Facebook User Name 
"John Earnest”; and 

Facebook ID Account Number 100005829157939, with Facebook | 
Username: “John Tocatina,” 

(hereinafter, the “SUBJECT ACCOUNTS”). The search of the data supplied by 
Facebook, Inc., pursuant to this warrant will be conducted as provided in the 
“Procedures for Electronically Stored Information” of the affidavit submitted in 
support of this search warrant and will be limited to: 

a. Communications, data, or attachments relating to the research, 
purchase, or acquisition of firearms, and the research or manufacture of incendiary 
or explosive devices; 
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b. Communications, data, or attachments tending to identify others 
involved in the criminal activity described below; 

c. Communications, data, or attachments third parties with whom John 
Ernest discussed the criminal activities described below; 

d. Communications, data, or attachments relating to John Earnests’ 
motivation and bias for committing the criminal activities described below; 

e. Communications, data, or attachments relating to the research of, visits 
to, or other connections with the Synagogue located on Chabad Way in Poway, 
California, and/or the Dar-ul-Arqam Mosque and Islamic Center (the “mosque”), 
located at 318 West 6th Avenue in Escondido, California; 

f. Communications, data, or attachments relating to the research or 
viewing of news articles and reports about the arson that occurred at the mosque in 
Escondido, California on March 24, 2019, or criminal acts committed by other 
individuals involving criminal activity described below; 

g. Communications, data, or attachments relating to recruiting and 
inspiring individuals to engage in the criminal activity described below; 

h. Communications, data, or attachments relating to the whereabouts of 
John Earnest and any criminal associates or co-conspirators at the of the April 27, 
2019, shooting at the synagogue on Chabad Way in Poway, and the March 24,2019, 
arson of the mosque in Escondido, California; 

i. Communications, data, or attachments that tend to provide context to 
the information described above, such as direct messages sent or received in 
temporal proximity to any relevant communications, or communications, data, or 
attachments tending to identify the user of or person with control over the 

SUBJECT ACCOUNTS. 
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during the time period from January 1, 2017, through April 27, 2019, which tend to 
prove violations of federal law, namely, intentional obstruction, by force or threat of 
force, of persons in the free exercise of religious belief, resulting in death, in 
violation of 18 U.S.C. § 247(a)(2), willfully causing bodily injury to persons through 
the use of a firearm because of the actual or perceived religion of said persons, 
resulting in death, in violation of 18 U.S.C. § 249(a)(1), and damage to religious 
property, in violation of 18 U.S.C. § 247(a)(1). 


IV 





